2009-11-12 21:57:06

by Daniel Walsh

[permalink] [raw]
Subject: [refpolicy] services_rpc.patch

http://people.fedoraproject.org/~dwalsh/SELinux/F12/services_rpc.patch

cleanup


2010-02-12 20:41:33

by cpebenito

[permalink] [raw]
Subject: [refpolicy] services_rpc.patch

On Thu, 2009-11-12 at 16:57 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F12/services_rpc.patch
>
> cleanup

Why would this be doing raw reads on removable devices?

Why is a user_home_dir_t -> user_home_t filetrans required for nfsd_t?

--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

2010-02-13 11:52:12

by Daniel Walsh

[permalink] [raw]
Subject: [refpolicy] services_rpc.patch

On 02/12/2010 03:41 PM, Christopher J. PeBenito wrote:
> On Thu, 2009-11-12 at 16:57 -0500, Daniel J Walsh wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F12/services_rpc.patch
>>
>> cleanup
>
> Why would this be doing raw reads on removable devices?
>
> Why is a user_home_dir_t -> user_home_t filetrans required for nfsd_t?
>
Perhaps you homedir is mounted on a remove machine and you create content in the toplevel. Does this get labeled as
user_home_t as it should, or does it get labeled user_home_dir_t? I think this was an effort to fix this. but I am not sure that
it works, since I think the kernel_t actually creates the content, not nfsd_t.

If someone could setup an experiment.